Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File:                     8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier:          3JnXO+HCp3KEc/hZ5+aYDKtf8MYpMl9gsr15ptZZ0Z0=
Subject key identifier:   47:A7:2C:57:6D:0E:BA:91:51:86:A0:62:CD:B8:44:C1:5B:29:DD:3D
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer:       /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial:       019E26CADEFA1D7643AF3E7E35F11D35D9D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number:          0615
Signing time:             Thu 14 May 2026 14:01:29 +0000
Manifest this update:     Thu 14 May 2026 14:01:29 +0000
Manifest next update:     Fri 15 May 2026 14:01:29 +0000
Files and hashes:         1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: tbSTJOWoEM3j2DjVpKLOccq8lwdtsi40FfZ5I+lRQIo=)
                          2: B1xsgML2xDaRQYkGxUtabnWxmGY.roa (hash: +xPFhEuCza9EAaqJyGgj1UH0V5vl/QcBkrNeZ95rHj4=)
                          3: WOH-dDFILdAlNDw8JowUyaFPvJw.roa (hash: OCSDelJnuET1EEoYclmA8O4BqfKPKxqqfnyLODL87wk=)
                          4: X4JSAl7mEoJyzznkY14VbNv09k8.roa (hash: j50w3dwHk0KiPncH2Bx9DQIkaE9cvvACV1hP4QRJhbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 14:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:26:ca:de:fa:1d:76:43:af:3e:7e:35:f1:1d:35:d9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
        Validity
            Not Before: May 14 14:01:29 2026 GMT
            Not After : May 15 14:01:29 2026 GMT
        Subject: CN=47a72c576d0eba915186a062cdb844c15b29dd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:fd:3d:51:a5:0a:f6:7d:3e:07:d0:5d:a4:
                    01:66:73:b7:10:a3:d6:5d:58:7a:57:dc:0b:b7:59:
                    39:cf:3c:21:e8:bf:07:cd:b9:f6:5c:9b:20:38:a0:
                    6c:24:8a:87:8c:62:23:2d:f7:44:0b:7d:5c:f3:b1:
                    2c:5b:2b:43:0d:7a:2b:e3:60:b4:0d:ae:63:8e:4c:
                    87:ad:26:f6:1e:24:93:2e:84:b4:3e:d1:f1:08:20:
                    1a:ed:3e:0f:9f:ec:7b:43:d9:43:19:be:a3:51:98:
                    46:f2:a9:2c:06:ed:b0:d9:fc:92:2d:f4:5a:c5:36:
                    0c:53:2a:4b:93:9e:c8:53:be:c2:4d:af:c2:f8:40:
                    06:d3:d3:9a:1d:70:70:89:22:88:a2:88:c0:7f:c5:
                    23:07:85:19:73:03:19:b6:bf:41:96:67:ae:2c:77:
                    74:8d:a7:c2:02:72:aa:8b:39:9b:cc:b2:a5:c3:e4:
                    d4:81:34:f3:9e:7b:ae:8c:bd:3d:6c:52:55:c8:93:
                    e9:2d:89:77:d2:83:65:19:b7:91:d0:80:93:d7:52:
                    08:91:aa:63:63:5b:f2:dc:43:25:8d:d0:0c:50:e5:
                    f9:89:a9:2a:4b:4b:5a:24:57:1f:d5:e6:42:3a:ea:
                    95:c6:ba:91:37:76:5e:92:59:28:ee:d4:2a:15:3f:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A7:2C:57:6D:0E:BA:91:51:86:A0:62:CD:B8:44:C1:5B:29:DD:3D
            X509v3 Authority Key Identifier:
                keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7b:f4:84:07:8c:05:56:b6:aa:1a:71:bd:6b:30:aa:0a:35:
         16:4a:2c:46:80:47:34:1f:52:2f:02:74:ac:c1:24:23:3b:fd:
         14:81:c9:2e:a2:d0:1c:4f:b0:92:63:a2:5c:18:88:f0:1a:c7:
         9f:a0:0a:56:74:98:54:fb:ba:15:4c:11:68:09:52:97:95:96:
         e4:be:d0:b0:e2:4e:9a:38:0c:67:78:c3:55:e2:c7:29:98:d9:
         2e:b9:b4:05:eb:76:0c:e6:50:7e:a7:a3:7a:9c:99:3c:a9:c9:
         39:11:ce:eb:c4:f9:b5:43:76:26:1f:ea:77:6b:48:b4:a7:1f:
         8a:bf:5a:95:b0:c0:1e:91:b7:76:59:cc:e7:30:a9:de:90:03:
         3b:e6:2f:db:2e:c1:18:1d:26:de:ce:fd:ce:df:09:54:ce:4d:
         98:5c:4d:ba:a9:47:93:63:0d:0b:96:67:65:90:8d:52:4e:ea:
         5a:62:fe:fa:1a:e1:60:8e:1c:b9:ee:85:d7:c9:28:86:8f:0f:
         4c:31:66:67:e2:f1:23:fe:07:51:56:6e:ba:cc:a0:fe:58:89:
         b2:59:c3:68:a0:01:43:0d:3b:76:bc:86:3b:69:8c:c6:6e:5a:
         ad:9e:1e:00:5d:4c:4f:3c:10:fa:c5:0c:f0:eb:7e:54:15:a4:
         a6:8c:ad:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 23:48:09 2026 by rpki-client